a0185fcf97acd26b4749ffd59299dc7aa299a457d2ed31501dd15461d32c3082 | Triage

Sharing

General

Target

ab0776b1c2a31c18a701389edf5c6a70_JaffaCakes118
Size

394KB
Sample

240819-pphbrstfnh
MD5

ab0776b1c2a31c18a701389edf5c6a70
SHA1

80a72eb1dba75bd2b10378fa7ae1fa72ed9f0dfd
SHA256

a0185fcf97acd26b4749ffd59299dc7aa299a457d2ed31501dd15461d32c3082
SHA512

e97363fe2d66af8150508da64e728a63df7a9c5174ce20240251554a438217feccc61bf297e8d44918e4dcda1ccea4de4681296b3b4fb22dbba754cccf907e03
SSDEEP

12288:uyL+Id6Wl/uAcim31NBaN7tb9tTQnvwq9RG:uC+BO+im37BIpb9tCvwqW

Score

6^/10

discovery persistence

Malware Config

Targets

- Target
  
  ab0776b1c2a31c18a701389edf5c6a70_JaffaCakes118
- Size
  
  394KB
- MD5
  
  ab0776b1c2a31c18a701389edf5c6a70
- SHA1
  
  80a72eb1dba75bd2b10378fa7ae1fa72ed9f0dfd
- SHA256
  
  a0185fcf97acd26b4749ffd59299dc7aa299a457d2ed31501dd15461d32c3082
- SHA512
  
  e97363fe2d66af8150508da64e728a63df7a9c5174ce20240251554a438217feccc61bf297e8d44918e4dcda1ccea4de4681296b3b4fb22dbba754cccf907e03
- SSDEEP
  
  12288:uyL+Id6Wl/uAcim31NBaN7tb9tTQnvwq9RG:uC+BO+im37BIpb9tCvwqW
Score

6^/10

discovery persistence
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence